User sychronisation

How do you limit what gets synchronized from the central AD server? i.e. if we configure it to point to our central AD, I only want to synchronize those users who will use the tools, not everyone in the AD as that would be a huge list for us.